Skip to content
siteshop.

Legal

Privacy Policy

What we collect, why we collect it, who it reaches, and how to get it back or get it deleted. Written to be read rather than to be survived.

Effective 30 July 2026

01

Who we are

Siteshop Digital is a limited liability company registered in the State of Wyoming, United States. We design and build websites for local service businesses and run the search work behind them.

You can reach us at chris@siteshopdigital.com about anything on this page, including a request to see, correct or delete the information we hold about you.

02

What we collect

There are only three ways information reaches us, and all three are listed here in full.

The free audit request form
Your website address, your Google Business Profile link, your email address, and your business type. Four fields, and we do not ask for more, because we do not need more to build the audit.
Contact, intake and booking
When you email us, complete an intake form or book a call, we receive what you type into it. That is typically your name, your email address, your phone number if you choose to give one, and whatever you tell us about your business. Call bookings are handled by Cal.com and reach us through them.
Server logs, generated automatically
Our hosting provider keeps standard logs including IP addresses, browser type and the pages requested. These are produced by the act of serving a webpage and are used for security and troubleshooting.

We take no payments on this website, so no card or bank details reach us through it at any point. We also do not ask for and do not want government identification numbers or any sensitive category of personal information. Please do not send them to us.

03

Cookies and tracking

This website does not set advertising cookies and does not carry a cross-site tracking pixel from any advertising network. Analytics is not enabled on the build at the time this page took effect.

Web fonts are loaded from Google Fonts, which means your browser makes a request to Google's servers when a page loads. That request carries your IP address and is subject to Google's own privacy policy.

If we ever turn on analytics or any other measurement tool on this site, this section changes at the same time. A privacy page that lags the code it describes is worse than not having one.

04

Why we use it

To reply to you, to build and deliver the free audit you asked for, to quote work, and to carry out an engagement once one exists. That is the whole list.

We do not sell personal information, we do not rent it, and we do not share it with advertisers or data brokers. We do not use what you send us to build a marketing list for anybody else.

05

Who we share it with

A small number of service providers run parts of this business, and information passes through them in the ordinary course of that. Here is the complete list, named rather than described as a category.

Vercel
Website hosting and delivery. Generates the server logs described above.
Supabase
Stores the audit request and intake form submissions so we can work from them.
Resend
Sends the transactional email, including the audit we send back to you.
Cal.com
Handles call scheduling, including the times you pick and the details you enter when booking.
Cloudflare
Domain name service. Routes visitors to the site.
Google Fonts
Serves the two typefaces this site uses. Your browser requests them directly, which means Google receives your IP address on page load.

Each of these processes information on our instructions and under its own privacy terms, and none of them is authorised to use your information for their own marketing. Beyond that list, we disclose information only where the law requires it, or where it is necessary to establish or defend a legal claim. If we ever add a processor, this list changes in the same commit.

06

How long we keep it

Enquiries and audit requests that do not become engagements are kept for up to 24 months, so that we can pick up a conversation where it left off, and are deleted after that.

Records connected to a paid engagement are kept for as long as the engagement runs and for 7 years afterwards, which is the ordinary period for business and tax records in the United States.

You can ask us to delete your information sooner and we will, unless we are required to keep a specific record.

07

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email us and we will action it within 30 days. We will not charge you for it and we will not make you create an account to do it.

If you are contacting us from outside the United States, note that our systems and our service providers operate in the United States, so information you send us is processed there.

08

California and other state privacy rights

If you are a California resident, the California Consumer Privacy Act gives you specific named rights. Residents of other states with comparable statutes have rights that closely mirror these, and we apply the same process to all of them rather than making you prove where you live.

Right to know
You may request the categories and the specific pieces of personal information we hold about you, and where we got them.
Right to delete
You may request deletion of your personal information. We will do it unless a specific record has to be kept for legal or tax reasons, in which case we will tell you which one and why.
Right to correct
You may ask us to fix anything inaccurate. Given that most of what we hold is what you typed into a form, this is usually a one-line email.
No sale or sharing
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under the CCPA. There is therefore nothing on this site for you to opt out of.
No retaliation
We will not treat you differently, refuse you service, or change what we charge you because you exercised any of these rights.

To use any of them, email us. No form, no account, no verification hoop beyond confirming you control the email address the information is attached to.

09

Security

The site is served over HTTPS, form submissions are transmitted encrypted, and access to stored submissions is limited to people who need it to do the work.

No system is perfectly secure, and we are not going to claim otherwise. If a breach occurs that affects your information, we will tell you and any regulator we are required to tell.

10

Children

This site is aimed at business owners and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe a child has sent us information, email us and we will delete it.

11

Changes to this policy

When this policy changes, the effective date at the top of the page changes with it. We do not quietly revise these pages and leave the date alone.

Material changes that affect how we handle information you have already given us will be sent to you by email where we hold an address for you.

This page describes how Siteshop Digital operates. It is written to be read rather than to be impenetrable, and it is not legal advice. Where a signed engagement agreement covers the same ground, that agreement governs.